popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1561 2020-08-29 13:50 pIRroskP.exe  

c67519b9cfa231014038f61ac5c1cc60


VirusTotal Malware unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 4.6 15 guest

1562 2020-08-29 14:03 0x8al40L.exe  

aabb51478938fb95e0cd6a62b8a7d2f5


VirusTotal Malware unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 4.6 16 guest

1563 2020-08-29 14:15 SMx7632139.exe  

67f1be97912bc7a7761c69751515026a


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Browser Advertising ComputerName DNS Cryptographic key 		3 11 7.8 16 guest

1564 2020-08-29 14:29 EVW2800204.exe  

7e6269e04d33c373fbe62734f2e4f501


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Browser Advertising ComputerName DNS Cryptographic key 		3 12 8.4 16 guest

1565 2020-08-29 14:36 zxcvb.exe  

ca71563b7ac88247b3b0210b71cc50b6


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Ransomware Windows Browser Email ComputerName DNS Software 		16 6 23.6 M 24 guest

1566 2020-08-29 14:43 Invoice 009453913.doc  

33be4c05626a25a449d335917a581a7d


Vulnerability VirusTotal Malware Malicious Traffic unpack itself DNS 		4 7 5.8 26 guest

1567 2020-08-30 09:14 http://provence.anmyondo.co.kr...  

6b9e1cc512993376f2777923345f15cb


Code Injection unpack itself Windows utilities malicious URLs Windows DNS 		2 3 3.2 guest

1568 2020-08-30 09:19 W_952655721352.doc  

d8d2efbdc39fdf5c2ab1ac103b086013


Vulnerability VirusTotal Malware Malicious Traffic unpack itself DNS 		2 3 5.4 M 29 guest

1569 2020-08-30 09:24 http://godtving.com/  

41aa4b5b2c1dd8898fb5fe98f52b1b28


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit crashed 		17 17 4.0 guest

1570 2020-08-30 09:40 Payment status.doc  

223975e6f03f5cc32074a00e82f8cf99


VirusTotal Malware Malicious Traffic unpack itself DNS 		2 3 4.8 M 25 guest

1571 2020-08-30 14:51 OXhYYv1Fyr.exe  

a4513379dad5233afa402cc56a8b9222


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 2 6.8 M 23 guest

1572 2020-08-30 15:21 lr.exe  

d0f98c84fc52468726d3f807e0cab1f6


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 2 7.4 M 20 guest

1573 2020-08-30 21:48 s6LMDKmJzIeeSUFGna.exe  

dd3142ceb94ee1a392353d3a41932b2a


Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 2 6.0 guest

1574 2020-08-31 07:46 http://www.hairlineunisexsalon...  

30399283cd0ee3b49d730f4a6d70c5f5


VirusTotal Malware AutoRuns Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Auto service malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Windows Exploit Advertising ComputerName DNS Cryptographic key crashed 		3 5 11.6 23 guest

1575 2020-08-31 08:08 http://facanha.com.br/temp/fil...  

2786e3c5bce967d4658a2e048146e670


VirusTotal Malware suspicious privilege Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs human activity check Windows Exploit DNS crashed 		1 1 8.2 M guest

keyword